@aitne/daemon 0.1.0

package/dist/services/mail/gmail/poll-cursor.js

@@ -0,0 +1,32 @@
+const MAX_PROCESSED_IDS = 500;
+export function seedGmailPollCursor(now = new Date(), historyId) {
+    const cursor = {
+        kind: "gmail",
+        lastEpoch: Math.floor(now.getTime() / 1000),
+        processedIds: [],
+    };
+    if (historyId)
+        cursor.historyId = historyId;
+    return cursor;
+}
+export function trimGmailProcessedIds(ids) {
+    return ids.length > MAX_PROCESSED_IDS ? ids.slice(-MAX_PROCESSED_IDS) : ids;
+}
+export function normalizeGmailPollCursor(cursor, now = new Date()) {
+    if (!cursor || cursor.kind !== "gmail") {
+        return seedGmailPollCursor(now);
+    }
+    return {
+        ...cursor,
+        processedIds: Array.isArray(cursor.processedIds)
+            ? trimGmailProcessedIds(cursor.processedIds.filter((id) => typeof id === "string"))
+            : [],
+        nextPageToken: typeof cursor.nextPageToken === "string" && cursor.nextPageToken.length > 0
+            ? cursor.nextPageToken
+            : undefined,
+        historyPageToken: typeof cursor.historyPageToken === "string" && cursor.historyPageToken.length > 0
+            ? cursor.historyPageToken
+            : undefined,
+    };
+}
+//# sourceMappingURL=poll-cursor.js.map

package/dist/services/mail/gmail/poll-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-cursor.js","sourceRoot":"","sources":["../../../../src/services/mail/gmail/poll-cursor.ts"],"names":[],"mappings":"AAQA,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,UAAU,mBAAmB,CACjC,MAAY,IAAI,IAAI,EAAE,EACtB,SAAyB;IAEzB,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;QAC3C,YAAY,EAAE,EAAE;KACjB,CAAC;IACF,IAAI,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAa;IACjD,OAAO,GAAG,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAyB,EACzB,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvC,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO;QACL,GAAG,MAAM;QACT,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9C,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;YACnF,CAAC,CAAC,EAAE;QACN,aAAa,EACX,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACzE,CAAC,CAAC,MAAM,CAAC,aAAa;YACtB,CAAC,CAAC,SAAS;QACf,gBAAgB,EACd,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC/E,CAAC,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC"}

package/dist/services/mail/html-to-plaintext.d.ts

@@ -0,0 +1,27 @@
+export declare function htmlToPlainText(html: string): string;
+export interface ExtractedMailHtmlLink {
+    text: string | null;
+    href: string;
+    title: string | null;
+}
+export interface ExtractedMailHtmlImage {
+    alt: string | null;
+    title: string | null;
+    src: string | null;
+}
+export interface ExtractedMailHtmlBody {
+    text: string;
+    links: ExtractedMailHtmlLink[];
+    images: ExtractedMailHtmlImage[];
+}
+/**
+ * Extract the visible body from HTML mail for agent consumption.
+ *
+ * Unlike htmlToPlainText, this keeps link destinations and image alt/title
+ * metadata because booking confirmations often hide critical actions or
+ * reference numbers behind anchors and image attributes. Raw HTML can still
+ * be fetched separately when exact markup is required.
+ */
+export declare function extractMailHtmlBody(html: string): ExtractedMailHtmlBody;
+export declare function renderExtractedMailHtmlBody(extracted: ExtractedMailHtmlBody): string;
+//# sourceMappingURL=html-to-plaintext.d.ts.map

package/dist/services/mail/html-to-plaintext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-to-plaintext.d.ts","sourceRoot":"","sources":["../../../src/services/mail/html-to-plaintext.ts"],"names":[],"mappings":"AAoBA,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBpD;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,MAAM,EAAE,sBAAsB,EAAE,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAQvE;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,qBAAqB,GAAG,MAAM,CAqBpF"}

package/dist/services/mail/html-to-plaintext.js

@@ -0,0 +1,163 @@
+/**
+ * HTML → plaintext for mail bodies, backed by `html-to-text`.
+ *
+ * Two call sites share this:
+ *   - Providers (Gmail/Outlook/IMAP) use it to derive a `text/plain` fallback
+ *     when a caller supplies `htmlBody` without `textBody`. HTML still goes
+ *     alongside in multipart/alternative — this only exists for text-only
+ *     fallback clients.
+ *   - `mail-classifier` uses it when a received message has no text/plain
+ *     part, so pattern matching (booking codes, provider names, etc.) has
+ *     plaintext to work with.
+ *
+ * `html-to-text` handles the edge cases regex-stripping misses: malformed
+ * tags, nested quoting, numeric/named entities, table flattening, and
+ * CDATA sections. Kept to a minimal options object because mail-classifier
+ * only needs runs of text — we don't want Markdown-like link decoration
+ * (`[text](url)`) to confuse regex matchers further down.
+ */
+import { convert } from "html-to-text";
+export function htmlToPlainText(html) {
+    return convert(html, {
+        wordwrap: false,
+        selectors: [
+            // Skip styling and scripting content entirely.
+            { selector: "style", format: "skip" },
+            { selector: "script", format: "skip" },
+            { selector: "head", format: "skip" },
+            // Drop the href entirely — we only want the anchor's visible text.
+            // Leaving hrefs in produces "Click here [https://...]" which pollutes
+            // the regex-matcher's text window downstream.
+            { selector: "a", options: { ignoreHref: true } },
+            // Images contribute nothing to the text heuristics.
+            { selector: "img", format: "skip" },
+        ],
+        preserveNewlines: false,
+    }).trim();
+}
+/**
+ * Extract the visible body from HTML mail for agent consumption.
+ *
+ * Unlike htmlToPlainText, this keeps link destinations and image alt/title
+ * metadata because booking confirmations often hide critical actions or
+ * reference numbers behind anchors and image attributes. Raw HTML can still
+ * be fetched separately when exact markup is required.
+ */
+export function extractMailHtmlBody(html) {
+    const bodyHtml = extractBodyHtml(html);
+    const text = htmlToPlainText(bodyHtml);
+    return {
+        text,
+        links: extractLinks(bodyHtml),
+        images: extractImages(bodyHtml),
+    };
+}
+export function renderExtractedMailHtmlBody(extracted) {
+    const sections = [extracted.text].filter((s) => s.trim().length > 0);
+    if (extracted.links.length > 0) {
+        sections.push([
+            "Links:",
+            ...extracted.links.map((link) => {
+                const label = link.text ?? link.title ?? "(no text)";
+                return `- ${label}: ${link.href}`;
+            }),
+        ].join("\n"));
+    }
+    if (extracted.images.length > 0) {
+        sections.push([
+            "Images:",
+            ...extracted.images.map((image) => {
+                const label = image.alt ?? image.title ?? "(no alt/title)";
+                return image.src ? `- ${label}: ${image.src}` : `- ${label}`;
+            }),
+        ].join("\n"));
+    }
+    return sections.join("\n\n").trim();
+}
+function extractLinks(html) {
+    const links = [];
+    const seen = new Set();
+    const re = /<a\b([^>]*)>([\s\S]*?)<\/a>/gi;
+    let match;
+    while ((match = re.exec(html)) !== null) {
+        /* c8 ignore start — match[1] / match[2] are required captures, always
+           defined for a successful match; `?? ""` fallbacks are defensive. */
+        const attrs = parseAttributes(match[1] ?? "");
+        const href = attrs.href?.trim();
+        if (!href)
+            continue;
+        const text = htmlToPlainText(match[2] ?? "") || null;
+        const title = attrs.title?.trim() || null;
+        /* c8 ignore stop */
+        const key = `${href}\n${text ?? ""}\n${title ?? ""}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        links.push({ text, href: decodeCommonEntities(href), title });
+    }
+    return links;
+}
+function extractImages(html) {
+    const images = [];
+    const seen = new Set();
+    const re = /<img\b([^>]*)>/gi;
+    let match;
+    while ((match = re.exec(html)) !== null) {
+        // match[1] is the `([^>]*)` capture group, always defined for a
+        // successful match; the `?? ""` is defensive only.
+        /* c8 ignore next */
+        const attrs = parseAttributes(match[1] ?? "");
+        const alt = attrs.alt?.trim() || null;
+        // attrs.title may be whitespace (`title=" "`); the `||` falls back
+        // to null in that case. Tests don't exercise the whitespace branch.
+        /* c8 ignore next */
+        const title = attrs.title?.trim() || null;
+        const src = attrs.src?.trim() || null;
+        if (!alt && !title && !src)
+            continue;
+        const key = `${alt ?? ""}\n${title ?? ""}\n${src ?? ""}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        images.push({
+            alt,
+            title,
+            src: src ? decodeCommonEntities(src) : null,
+        });
+    }
+    return images;
+}
+function parseAttributes(raw) {
+    const attrs = {};
+    const re = /([:\w-]+)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/g;
+    let match;
+    while ((match = re.exec(raw)) !== null) {
+        /* c8 ignore start — match[1] is required capture; one of match[2-4]
+           is always defined for the alternation pattern. Defensive only. */
+        const key = (match[1] ?? "").toLowerCase();
+        const value = match[2] ?? match[3] ?? match[4] ?? "";
+        /* c8 ignore stop */
+        attrs[key] = decodeCommonEntities(value);
+    }
+    return attrs;
+}
+function extractBodyHtml(html) {
+    const match = /<body\b[^>]*>([\s\S]*?)<\/body>/i.exec(html);
+    return match?.[1] ?? html;
+}
+function decodeCommonEntities(value) {
+    return value
+        .replace(/&#x([0-9a-f]+);/gi, (raw, hex) => decodeCodePoint(raw, Number.parseInt(hex, 16)))
+        .replace(/&#(\d+);/g, (raw, decimal) => decodeCodePoint(raw, Number.parseInt(decimal, 10)))
+        .replace(/&amp;/gi, "&")
+        .replace(/&quot;/gi, "\"")
+        .replace(/&#39;|&apos;/gi, "'")
+        .replace(/&lt;/gi, "<")
+        .replace(/&gt;/gi, ">");
+}
+function decodeCodePoint(raw, value) {
+    if (!Number.isFinite(value) || value < 0 || value > 0x10ffff)
+        return raw;
+    return String.fromCodePoint(value);
+}
+//# sourceMappingURL=html-to-plaintext.js.map

package/dist/services/mail/html-to-plaintext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-to-plaintext.js","sourceRoot":"","sources":["../../../src/services/mail/html-to-plaintext.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,OAAO,CAAC,IAAI,EAAE;QACnB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE;YACT,+CAA+C;YAC/C,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;YACrC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;YACtC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACpC,mEAAmE;YACnE,sEAAsE;YACtE,8CAA8C;YAC9C,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;YAChD,oDAAoD;YACpD,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;SACpC;QACD,gBAAgB,EAAE,KAAK;KACxB,CAAC,CAAC,IAAI,EAAE,CAAC;AACZ,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC7B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAgC;IAC1E,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ;YACR,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;gBACrD,OAAO,KAAK,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS;YACT,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC;gBAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/D,CAAC,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,EAAE,GAAG,+BAA+B,CAAC;IAC3C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC;8EACsE;QACtE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QAC1C,oBAAoB;QACpB,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,EAAE,GAAG,kBAAkB,CAAC;IAC9B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,gEAAgE;QAChE,mDAAmD;QACnD,oBAAoB;QACpB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QACtC,mEAAmE;QACnE,oEAAoE;QACpE,oBAAoB;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC;YACV,GAAG;YACH,KAAK;YACL,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,sDAAsD,CAAC;IAClE,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC;4EACoE;QACpE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,oBAAoB;QACpB,KAAK,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAW,EAAE,EAAE,CACjD,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAC/C;SACA,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,OAAe,EAAE,EAAE,CAC7C,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CACnD;SACA,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;SACzB,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,GAAG,CAAC;IACzE,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC"}

package/dist/services/mail/imap/app-password.d.ts

@@ -0,0 +1,27 @@
+import type { MailProviderKind } from "../provider.js";
+export type ImapAppPasswordKind = Extract<MailProviderKind, "yahoo" | "icloud">;
+export interface ImapEndpointConfig {
+    host: string;
+    port: number;
+    secure: boolean;
+    requireTls?: boolean;
+}
+export interface ImapFolderHints {
+    sent: string;
+    drafts: string;
+    trash: string;
+    archive: string;
+}
+export interface ImapAccountSecret {
+    kind: ImapAppPasswordKind;
+    email: string;
+    appPassword: string;
+    imap: ImapEndpointConfig;
+    smtp: ImapEndpointConfig;
+    folderHints: ImapFolderHints;
+}
+export declare function isImapAppPasswordKind(kind: MailProviderKind | string): kind is ImapAppPasswordKind;
+export declare function buildImapAccountSecret(kind: ImapAppPasswordKind, email: string, appPassword: string): ImapAccountSecret;
+export declare function serializeImapAccountSecret(secret: ImapAccountSecret): string;
+export declare function parseImapAccountSecret(raw: string): ImapAccountSecret;
+//# sourceMappingURL=app-password.d.ts.map

package/dist/services/mail/imap/app-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-password.d.ts","sourceRoot":"","sources":["../../../../src/services/mail/imap/app-password.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,EAAE,OAAO,GAAG,QAAQ,CAAC,CAAC;AAEhF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,eAAe,CAAC;CAC9B;AAoED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,gBAAgB,GAAG,MAAM,GAC9B,IAAI,IAAI,mBAAmB,CAE7B;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAUnB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAE5E;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAErE"}

package/dist/services/mail/imap/app-password.js

@@ -0,0 +1,86 @@
+import { z } from "zod";
+const SECRET_SCHEMA = z.object({
+    kind: z.enum(["yahoo", "icloud"]),
+    email: z.string().email(),
+    appPassword: z.string().min(1),
+    imap: z.object({
+        host: z.string().min(1),
+        port: z.number().int().positive(),
+        secure: z.boolean(),
+        requireTls: z.boolean().optional(),
+    }),
+    smtp: z.object({
+        host: z.string().min(1),
+        port: z.number().int().positive(),
+        secure: z.boolean(),
+        requireTls: z.boolean().optional(),
+    }),
+    folderHints: z.object({
+        sent: z.string().min(1),
+        drafts: z.string().min(1),
+        trash: z.string().min(1),
+        archive: z.string().min(1),
+    }),
+});
+const PRESETS = {
+    yahoo: {
+        kind: "yahoo",
+        imap: {
+            host: "imap.mail.yahoo.com",
+            port: 993,
+            secure: true,
+        },
+        smtp: {
+            host: "smtp.mail.yahoo.com",
+            port: 465,
+            secure: true,
+        },
+        folderHints: {
+            sent: "Sent",
+            drafts: "Drafts",
+            trash: "Trash",
+            archive: "Archive",
+        },
+    },
+    icloud: {
+        kind: "icloud",
+        imap: {
+            host: "imap.mail.me.com",
+            port: 993,
+            secure: true,
+        },
+        smtp: {
+            host: "smtp.mail.me.com",
+            port: 587,
+            secure: false,
+            requireTls: true,
+        },
+        folderHints: {
+            sent: "Sent Messages",
+            drafts: "Drafts",
+            trash: "Deleted Messages",
+            archive: "Archive",
+        },
+    },
+};
+export function isImapAppPasswordKind(kind) {
+    return kind === "yahoo" || kind === "icloud";
+}
+export function buildImapAccountSecret(kind, email, appPassword) {
+    const preset = PRESETS[kind];
+    return {
+        kind,
+        email,
+        appPassword,
+        imap: { ...preset.imap },
+        smtp: { ...preset.smtp },
+        folderHints: { ...preset.folderHints },
+    };
+}
+export function serializeImapAccountSecret(secret) {
+    return JSON.stringify(secret);
+}
+export function parseImapAccountSecret(raw) {
+    return SECRET_SCHEMA.parse(JSON.parse(raw));
+}
+//# sourceMappingURL=app-password.js.map

package/dist/services/mail/imap/app-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-password.js","sourceRoot":"","sources":["../../../../src/services/mail/imap/app-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4BxB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,OAAO,GAAkF;IAC7F,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,IAAI,EAAE;YACJ,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,WAAW,EAAE;YACX,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,SAAS;SACnB;KACF;IACD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE;YACJ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI;SACjB;QACD,WAAW,EAAE;YACX,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,SAAS;SACnB;KACF;CACF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,IAA+B;IAE/B,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAyB,EACzB,KAAa,EACb,WAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,IAAI;QACJ,KAAK;QACL,WAAW;QACX,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAyB;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/services/mail/imap/auth-failure-classifier.d.ts

@@ -0,0 +1,21 @@
+import type { AuthStatus } from "../provider.js";
+export type ImapClassifiedFailure = {
+    status: "healthy";
+} | {
+    status: "requires_consent";
+    reason: string;
+} | {
+    status: "degraded";
+    reason: string;
+} | {
+    status: "transient";
+    reason: string;
+};
+export interface ImapClassifyInput {
+    errorName?: string | null;
+    message?: string | null;
+    responseCode?: number | null;
+}
+export declare function classifyImapAuthFailure(input: ImapClassifyInput): ImapClassifiedFailure;
+export declare function effectiveImapAuthStatus(classified: ImapClassifiedFailure): AuthStatus | null;
+//# sourceMappingURL=auth-failure-classifier.d.ts.map

package/dist/services/mail/imap/auth-failure-classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-failure-classifier.d.ts","sourceRoot":"","sources":["../../../../src/services/mail/imap/auth-failure-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAaD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,GACvB,qBAAqB,CA4CvB;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,qBAAqB,GAChC,UAAU,GAAG,IAAI,CAKnB"}

package/dist/services/mail/imap/auth-failure-classifier.js

@@ -0,0 +1,54 @@
+const RECONSENT_PATTERNS = [
+    /AUTHENTICATIONFAILED/i,
+    /invalid credentials/i,
+    /login failed/i,
+    /invalid login/i,
+    /app password/i,
+    /not authenticated/i,
+];
+const RECONSENT_CODES = new Set([534, 535]);
+export function classifyImapAuthFailure(input) {
+    const message = input.message ?? "";
+    if ((input.responseCode !== null &&
+        input.responseCode !== undefined &&
+        RECONSENT_CODES.has(input.responseCode)) ||
+        RECONSENT_PATTERNS.some((pattern) => pattern.test(message)) ||
+        input.errorName === "AuthError") {
+        return {
+            status: "requires_consent",
+            reason: input.responseCode !== null && input.responseCode !== undefined
+                ? `code_${input.responseCode}`
+                : input.errorName ?? "authentication_failed",
+        };
+    }
+    if (input.responseCode !== null &&
+        input.responseCode !== undefined &&
+        input.responseCode >= 500) {
+        return {
+            status: "degraded",
+            reason: `code_${input.responseCode}`,
+        };
+    }
+    if (input.responseCode !== null &&
+        input.responseCode !== undefined &&
+        input.responseCode >= 400) {
+        return {
+            status: "transient",
+            reason: `code_${input.responseCode}`,
+        };
+    }
+    return {
+        status: "transient",
+        reason: input.errorName ?? "unknown",
+    };
+}
+export function effectiveImapAuthStatus(classified) {
+    if (classified.status === "healthy")
+        return "healthy";
+    if (classified.status === "requires_consent")
+        return "requires_consent";
+    if (classified.status === "degraded")
+        return "degraded";
+    return null;
+}
+//# sourceMappingURL=auth-failure-classifier.js.map

package/dist/services/mail/imap/auth-failure-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-failure-classifier.js","sourceRoot":"","sources":["../../../../src/services/mail/imap/auth-failure-classifier.ts"],"names":[],"mappings":"AAcA,MAAM,kBAAkB,GAAG;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,oBAAoB;CACrB,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEpD,MAAM,UAAU,uBAAuB,CACrC,KAAwB;IAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IACE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI;QAC1B,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,KAAK,CAAC,SAAS,KAAK,WAAW,EAC/B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EACJ,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;gBAC7D,CAAC,CAAC,QAAQ,KAAK,CAAC,YAAY,EAAE;gBAC9B,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,uBAAuB;SACjD,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,YAAY,KAAK,IAAI;QAC3B,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,KAAK,CAAC,YAAY,IAAI,GAAG,EACzB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,QAAQ,KAAK,CAAC,YAAY,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,YAAY,KAAK,IAAI;QAC3B,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,KAAK,CAAC,YAAY,IAAI,GAAG,EACzB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,QAAQ,KAAK,CAAC,YAAY,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAiC;IAEjC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IACxE,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/mail/imap/capabilities.d.ts

@@ -0,0 +1,30 @@
+/**
+ * IMAP CAPABILITY probe results (Phase 4).
+ *
+ * The probe runs on each account's first live connect. The result is cached
+ * on the provider instance and persisted via {@link MailAccountRegistry} so
+ * Phase 7's deletion reconciliation job (§3.1.1) and bulk thread sync (§3.6)
+ * can branch on what the server actually supports without reprobing.
+ *
+ * Phase 4 only *writes* this data; no Phase 4 code path reads it.
+ */
+export interface ImapCapabilitySet {
+    /** RFC 7162 QRESYNC — fast reconnect + VANISHED responses. Used for deletion reconciliation (§3.1.1). */
+    qresync: boolean;
+    /** RFC 5256 THREAD=REFERENCES — server-side THREAD command. Opportunistic threading optimization (§3.6). */
+    threadReferences: boolean;
+    /** RFC 6154 SPECIAL-USE — LIST returns \Sent, \Drafts, \Trash, \Archive, \Junk attributes. Used for Sent-folder resolution (§3.1.2). */
+    specialUse: boolean;
+    /** RFC 4315 UIDPLUS — APPENDUID / COPYUID responses. Cleaner UID tracking on draft create and send-to-Sent. */
+    uidplus: boolean;
+    /** RFC 2177 IDLE — push notifications without repeated polls. */
+    idle: boolean;
+    /** RFC 6851 MOVE — single-command atomic move (vs COPY+STORE+EXPUNGE). */
+    move: boolean;
+    /** Raw capability names, sorted and upper-cased, useful for dashboard diagnostics. */
+    all: string[];
+}
+export declare function probeCapabilities(raw: Iterable<string> | Map<string, unknown> | null | undefined): ImapCapabilitySet;
+export declare function serializeCapabilities(caps: ImapCapabilitySet): string;
+export declare function parseCapabilitiesJson(raw: string | null | undefined): ImapCapabilitySet | null;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/services/mail/imap/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../../src/services/mail/imap/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,yGAAyG;IACzG,OAAO,EAAE,OAAO,CAAC;IACjB,4GAA4G;IAC5G,gBAAgB,EAAE,OAAO,CAAC;IAC1B,wIAAwI;IACxI,UAAU,EAAE,OAAO,CAAC;IACpB,+GAA+G;IAC/G,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,IAAI,EAAE,OAAO,CAAC;IACd,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC;IACd,sFAAsF;IACtF,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAC9D,iBAAiB,CAYnB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAErE;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC7B,iBAAiB,GAAG,IAAI,CAmB1B"}

package/dist/services/mail/imap/capabilities.js

@@ -0,0 +1,70 @@
+/**
+ * IMAP CAPABILITY probe results (Phase 4).
+ *
+ * The probe runs on each account's first live connect. The result is cached
+ * on the provider instance and persisted via {@link MailAccountRegistry} so
+ * Phase 7's deletion reconciliation job (§3.1.1) and bulk thread sync (§3.6)
+ * can branch on what the server actually supports without reprobing.
+ *
+ * Phase 4 only *writes* this data; no Phase 4 code path reads it.
+ */
+export function probeCapabilities(raw) {
+    const tokens = normalizeTokens(raw);
+    const set = new Set(tokens);
+    return {
+        qresync: set.has("QRESYNC"),
+        threadReferences: set.has("THREAD=REFERENCES"),
+        specialUse: set.has("SPECIAL-USE"),
+        uidplus: set.has("UIDPLUS"),
+        idle: set.has("IDLE"),
+        move: set.has("MOVE"),
+        all: [...set].sort(),
+    };
+}
+export function serializeCapabilities(caps) {
+    return JSON.stringify(caps);
+}
+export function parseCapabilitiesJson(raw) {
+    if (!raw)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object")
+        return null;
+    const record = parsed;
+    const allField = record.all;
+    if (!Array.isArray(allField))
+        return null;
+    // Re-derive from the canonical `all` list. Serialize and parse always
+    // round-trip together, so the booleans on disk match `all` by construction;
+    // rebuilding here also tolerates older JSON shapes that may predate a
+    // capability field (e.g. before `move` was added).
+    return probeCapabilities(allField.filter((x) => typeof x === "string"));
+}
+function normalizeTokens(raw) {
+    if (!raw)
+        return [];
+    // ImapFlow exposes capabilities as Map<string, boolean | number>; other
+    // callers may pass a plain array. Accept either shape and coerce to an
+    // upper-cased deduplicated list.
+    const out = [];
+    if (raw instanceof Map) {
+        for (const key of raw.keys()) {
+            if (typeof key === "string" && key.length > 0)
+                out.push(key.toUpperCase());
+        }
+        return out;
+    }
+    for (const entry of raw) {
+        if (typeof entry === "string" && entry.length > 0) {
+            out.push(entry.toUpperCase());
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/services/mail/imap/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../../src/services/mail/imap/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmBH,MAAM,UAAU,iBAAiB,CAC/B,GAA+D;IAE/D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3B,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC9C,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;QAClC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAuB;IAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAA8B;IAE9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,sEAAsE;IACtE,4EAA4E;IAC5E,sEAAsE;IACtE,mDAAmD;IACnD,OAAO,iBAAiB,CACtB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,GAA+D;IAE/D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,wEAAwE;IACxE,uEAAuE;IACvE,iCAAiC;IACjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,YAAY,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/services/mail/imap/client.d.ts

@@ -0,0 +1,15 @@
+import { ImapFlow } from "imapflow";
+import type { ImapAccountSecret } from "./app-password.js";
+import { type ImapCapabilitySet } from "./capabilities.js";
+export declare function createImapFlowClient(secret: ImapAccountSecret, overrides?: Record<string, unknown>): InstanceType<typeof ImapFlow>;
+/**
+ * Smoke-tests IMAP credentials and returns the server's advertised
+ * capabilities. ImapFlow populates `.capabilities` during the pre-auth
+ * CAPABILITY exchange, so the result is available synchronously after
+ * `connect()` resolves — before the server drops the connection under
+ * `verifyOnly`. The returned set is persisted alongside the new account row
+ * so Phase 7 readers see capability data from the first moment the account
+ * exists, not only after the first real poll tick.
+ */
+export declare function verifyImapAccountSecret(secret: ImapAccountSecret): Promise<ImapCapabilitySet>;
+//# sourceMappingURL=client.d.ts.map

package/dist/services/mail/imap/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/services/mail/imap/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAI9E,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,EACzB,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACtC,YAAY,CAAC,OAAO,QAAQ,CAAC,CAqB/B;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CA6B5B"}

package/dist/services/mail/imap/client.js

@@ -0,0 +1,60 @@
+import { ImapFlow } from "imapflow";
+import { probeCapabilities } from "./capabilities.js";
+const DEFAULT_MAX_IDLE_TIME_MS = 29 * 60 * 1000;
+export function createImapFlowClient(secret, overrides = {}) {
+    return new ImapFlow({
+        host: secret.imap.host,
+        port: secret.imap.port,
+        secure: secret.imap.secure,
+        auth: {
+            user: secret.email,
+            pass: secret.appPassword,
+            // No loginMethod: let ImapFlow negotiate the best mechanism the server
+            // advertises. Yahoo Mail only supports LOGIN (not AUTH=PLAIN), so
+            // forcing AUTH=PLAIN causes a transient connection failure.
+        },
+        disableAutoIdle: true,
+        maxIdleTime: DEFAULT_MAX_IDLE_TIME_MS,
+        // Enable QRESYNC so `expunge` events carry UIDs (not sequence numbers)
+        // when the server advertises the extension. Safe on non-QRESYNC
+        // servers — ImapFlow just doesn't ENABLE the extension and falls back.
+        // This is what makes Phase 7's real-time VANISHED path work.
+        qresync: true,
+        ...overrides,
+    });
+}
+/**
+ * Smoke-tests IMAP credentials and returns the server's advertised
+ * capabilities. ImapFlow populates `.capabilities` during the pre-auth
+ * CAPABILITY exchange, so the result is available synchronously after
+ * `connect()` resolves — before the server drops the connection under
+ * `verifyOnly`. The returned set is persisted alongside the new account row
+ * so Phase 7 readers see capability data from the first moment the account
+ * exists, not only after the first real poll tick.
+ */
+export async function verifyImapAccountSecret(secret) {
+    const client = createImapFlowClient(secret, {
+        verifyOnly: true,
+        includeMailboxes: true,
+        // Fail fast if the server stalls mid-auth. Without this, ImapFlow's
+        // 5-minute default socket timeout fires on the orphaned connection long
+        // after connect() has already thrown, crashing the daemon.
+        socketTimeout: 15_000,
+    });
+    // Register an error listener BEFORE connect() so that any background
+    // error event emitted by the orphaned socket (e.g. the socketTimeout
+    // above) is silently swallowed instead of becoming an uncaught exception
+    // that kills the daemon process.
+    client.on("error", () => { });
+    try {
+        await client.connect();
+    }
+    catch (err) {
+        // Force-close the socket immediately so the socketTimeout doesn't fire
+        // at all on failed authentication attempts.
+        client.close();
+        throw err;
+    }
+    return probeCapabilities(client.capabilities);
+}
+//# sourceMappingURL=client.js.map